alpine · CVE-2006-6048

Quick triage

参照： Official alpine advisory, NVD, CVE.org · CVE 詳細

Freshness: no update timestamp found; verify against the upstream OS advisory manually.

Tracker summary

CVE-2006-6048: no source package rows; 0 state rows across 0 repos (none); fixed 0, open 0.

Description:

SQL injection vulnerability in index.php in Etomite CMS 0.6.1.2, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter.